InfoSec Signals™
Sign InStart Free
Back to CVE records
Not yet scoredPublished Oct 28, 2025

CVE-2025-40056vhost: vringh: Fix copy_to_iter return value check

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check The return value of copy_to_iter can't be negative, check whether the copied length is equal to the requested length instead of checking for negative values.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 309bba39c945ac8ab8083ac05cd6cfe5822968e0 before bd71e7e0a612740e4de5524880c7cd40293af5f7; from 309bba39c945ac8ab8083ac05cd6cfe5822968e0 before 781226e11d5bdea0d69c7b5aa3cda874093c73b8; from 309bba39c945ac8ab8083ac05cd6cfe5822968e0 before b3a950d236e98440c07405ba597b11bce56a8050; 309bba39c945ac8ab8083ac05cd6cfe5822968e0 builds before 68aac2b335d474b938d154b9c95cbc58838cb2ce; from 309bba39c945ac8ab8083ac05cd6cfe5822968e0 before 439263376c2c4e126cac0d07e4987568de4eaba5
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.